CVE-2003-1043

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-08-18 · updated 2026-06-16

Description

SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote authenticated users with editkeywords privileges to execute arbitrary SQL via the id parameter to editkeywords.cgi.

Affected products

Mozilla Bugzilla: 2.4, 2.6, 2.8, 2.10, 2.12, 2.14 (+12)

References

http://bugzilla.mozilla.org/show_bug.cgi?id=219044
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774
http://www.securityfocus.com/archive/1/343185
http://www.securityfocus.com/bid/8953
https://exchange.xforce.ibmcloud.com/vulnerabilities/13596
http://bugzilla.mozilla.org/show_bug.cgi?id=219044
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774
http://www.securityfocus.com/archive/1/343185
http://www.securityfocus.com/bid/8953
https://exchange.xforce.ibmcloud.com/vulnerabilities/13596

Get alerted when CVE-2003-1043 or the next vulnerability affects your stack